What are the options available besides using intermediate signing keys? This seems like a weak link in trusting crypto.